CVE-2021-21311

HighCVSS 7.2/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-918

Affected software

No affected versions have been published.

Timeline

Published: Feb 11, 2021
Last modified: Jun 17, 2026
Added to CISA KEV: Sep 29, 2025
NVD status: Analyzed

Related CVEs from 2021

CVE-2021-213124.8GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software pack CVE-2021-213136.1GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software pack CVE-2021-213144.8GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software pack CVE-2021-213157.8The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed CVE-2021-213167.8less-openui5 is an npm package which enables building OpenUI5 themes with Less.js. In less-openui5 before version 0.10., when processing the CVE-2021-213175.3uap-core in an open-source npm package which contains the core of BrowserScope's original user agent string parser. In uap-core before versi CVE-2021-213185.4Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 th CVE-2021-213195.4Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript CVE-2021-213204.3matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0, the user content s CVE-2021-2132110.0fastify-reply-from is an npm package which is a fastify plugin to forward the current http request to another server. In fastify-reply-from CVE-2021-213229.8fastify-http-proxy is an npm package which is a fastify plugin for proxying your http requests to another server, with hooks. By crafting a CVE-2021-213235.3Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature a